High severity8.1NVD Advisory· Published Feb 24, 2026· Updated Jun 17, 2026

CVE-2026-2460

Description

A vulnerability exists in REB500 for an authenticated user with low-level privileges to access and alter the content of directories by using the DAC protocol that the user is not authorized to do so.

Affected products

Hitachienergy/Reb500 Firmware
cpe:2.3:o:hitachienergy:reb500_firmware:*:*:*:*:*:*:*:*
Range: <8.3.3.1
Hitachi/REB500llm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 8.0.0.0

Patches

Vulnerability mechanics

References

publisher.hitachienergy.com/previewnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000